Here are updated packages in the Yum repository:
- PHP 5.5.7 for RHEL/CentOS 5/6 changelog
- PHP 5.4.23 for RHEL/CentOS 5/6 changelog
- PHP 5.3.28 for RHEL/CentOS 5 changelog
All three releases fix a CVE CVE-2013-6420.
PHP 5.3.28 also fixes a CVE CVE-2013-4248 previously fixed in PHP 5.5.2 and 5.4.18, but only now has been put into PHP 5.3. This is incorrectly mentioned on the PHP.net website and changelog as the Ruby variant of the same flaw CVE-2013-4073.